 Andreas Steffen
|
ffe6f83272
|
added ikev1/ip-pool-db-push scenario
|
2009-10-14 21:35:43 +02:00 |
|
|
Andreas Steffen
|
628f023d59
|
NEWS for the 4.3.5dr3 release
|
2009-10-14 18:02:15 +02:00 |
|
|
Andreas Steffen
|
f4c4e78296
|
added ikev1/ip-pool-db scenario
|
2009-10-14 14:51:12 +02:00 |
|
|
Andreas Steffen
|
668870be47
|
pool should be in th gitignore list
|
2009-10-14 14:37:03 +02:00 |
|
|
Andreas Steffen
|
270bb348e3
|
pluto now supports SQL-based virtual IP pools
|
2009-10-14 14:30:14 +02:00 |
|
|
Andreas Steffen
|
601bc1df20
|
pluto can now make use of the mysql and sqlite plugins
|
2009-10-14 12:43:54 +02:00 |
|
|
Andreas Steffen
|
32bc430591
|
fixed inconsistent triplets.dat files
|
2009-10-14 11:08:01 +02:00 |
|
|
Andreas Steffen
|
247794827e
|
move SQL-based pool functionality to new attr-sql libstrongswan plugin
|
2009-10-13 17:02:29 +02:00 |
|
|
Andreas Steffen
|
4c8bb47abd
|
check provenance of nameserver entry
|
2009-10-13 13:58:43 +02:00 |
|
|
Andreas Steffen
|
27f4dd33b2
|
use definitions from libstrongswan/attributes/attributes.h
|
2009-10-13 13:55:06 +02:00 |
|
|
Andreas Steffen
|
930443afff
|
moved attribute_manager to libstrongswan
|
2009-10-13 13:46:27 +02:00 |
|
|
Andreas Steffen
|
cb7817a64b
|
scepclient now requires x509 plugin
|
2009-10-12 19:56:21 +02:00 |
|
|
Andreas Steffen
|
3fe152f275
|
sql/rw-eap-aka-rsa scenario requires eapaka-3gpp2 plugin
|
2009-10-12 19:50:44 +02:00 |
|
|
Andreas Steffen
|
63c75a98eb
|
updated evaltest of ikev1/no-priv-key scenario
|
2009-10-12 19:48:20 +02:00 |
|
|
Andreas Steffen
|
88eb0a4235
|
INTERNAL_IP6_NETMASK needed for ModeConfig
|
2009-10-12 19:45:12 +02:00 |
|
|
Andreas Steffen
|
a86d534b4c
|
prepended all ISAKMP notification message types with ISAKMP_
|
2009-10-12 13:47:22 +02:00 |
|
|
Andreas Steffen
|
509f70c132
|
added some pluto changes to NEWS
|
2009-10-12 08:05:48 +02:00 |
|
|
Andreas Steffen
|
295e92fe36
|
fixed output of offered CA
|
2009-10-11 21:24:39 +02:00 |
|
|
Andreas Steffen
|
e8e2a147db
|
fixed broken smartcard support (bug #91)
|
2009-10-11 21:14:05 +02:00 |
|
|
Andreas Steffen
|
1c75e3404d
|
some missing refactoring changes
|
2009-10-11 20:14:18 +02:00 |
|
|
Andreas Steffen
|
d4acf1dd3c
|
myids might not be defined yet
|
2009-10-11 18:05:38 +02:00 |
|
|
Andreas Steffen
|
3197a20a87
|
adapted ikev2/rw-eap-aka scenarios to eapaka-3gpp2 plugin
|
2009-10-11 00:35:01 +02:00 |
|
|
Andreas Steffen
|
9ea23c8f91
|
corrected ikev1/nat-two-rw evaltest.dat
|
2009-10-11 00:14:20 +02:00 |
|
|
Andreas Steffen
|
40441ddd39
|
removed orphaned sha1.c
|
2009-10-10 22:05:59 +02:00 |
|
|
Andreas Steffen
|
0da24e7d46
|
corrected evaltest.dat
|
2009-10-10 21:41:36 +02:00 |
|
|
Andreas Steffen
|
17722d4489
|
replaced struct id by identification_t
|
2009-10-10 21:19:38 +02:00 |
|
|
Andreas Steffen
|
c6b2b2aae2
|
corrected caption
|
2009-10-09 00:16:33 +02:00 |
|
|
Andreas Steffen
|
4b4f8bd732
|
created identification_create_from_sockaddr() function
|
2009-10-09 00:13:28 +02:00 |
|
|
Andreas Steffen
|
5026519057
|
medsrv.fcgi is not part of the git tree
|
2009-10-08 13:05:27 +02:00 |
|
|
Andreas Steffen
|
878fc472e9
|
hex_str() isn't used externally any more
|
2009-10-08 13:04:07 +02:00 |
|
|
Andreas Steffen
|
e64b4e96c9
|
parsing of generalNames is not needed any more
|
2009-10-08 12:42:29 +02:00 |
|
|
Andreas Steffen
|
88212ee6e7
|
use of asn1_build_known_oid()
|
2009-10-08 12:35:36 +02:00 |
|
|
Andreas Steffen
|
0354d5703d
|
migrated public key IDs to identification_t
|
2009-10-08 11:25:43 +02:00 |
|
|
Andreas Steffen
|
84e390fdc4
|
list subjectAltNames
|
2009-10-06 23:50:26 +02:00 |
|
|
Andreas Steffen
|
20afe5e9f5
|
some ipsec listall finetuning
|
2009-10-06 23:19:46 +02:00 |
|
|
Andreas Steffen
|
ce2f2461e0
|
pluto and charon now have the same ipsec listall output format
|
2009-10-06 16:49:46 +02:00 |
|
|
Andreas Steffen
|
f3e9eae283
|
the ikev1 scenarios need the x509 plugin
|
2009-10-06 14:38:34 +02:00 |
|
|
Andreas Steffen
|
cf85e1319b
|
streamlined output from get_validity()
|
2009-10-06 14:22:27 +02:00 |
|
|
Andreas Steffen
|
afdaa9e5bf
|
fixed serial number conversion from hex
|
2009-10-05 23:52:35 +02:00 |
|
|
Andreas Steffen
|
0da0f3fc3f
|
delete group attributes after use
|
2009-10-05 23:17:36 +02:00 |
|
|
Andreas Steffen
|
a9fe23cf53
|
stroke_list outputs group attributes
|
2009-10-05 23:13:51 +02:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
|
Andreas Steffen
|
0ea9cbc6e9
|
fixed output of authKeyID
|
2009-10-02 21:20:45 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|
|
Andreas Steffen
|
ec0abe4ab5
|
added some notBefore/notAfter debugging info
|
2009-10-02 20:14:09 +02:00 |
|
|
Andreas Steffen
|
daaedcb9c2
|
verify correctness of X.509 versions
|
2009-10-02 17:49:51 +02:00 |
|
|
Andreas Steffen
|
6f2f08fb8d
|
added all missing RFC 5280 OIDs
|
2009-10-02 14:10:27 +02:00 |
|
|
Andreas Steffen
|
03a52ce4e5
|
created ikev1/mode-config-multiple scenario
|
2009-10-01 09:42:35 +02:00 |
|
|
Andreas Steffen
|
eb4544f773
|
fixes multiple IPsec SAs with IKEv1 Mode Config
|
2009-10-01 09:41:35 +02:00 |
|
|
Andreas Steffen
|
70e81857f9
|
generate known OIDs dynamically
|
2009-09-30 11:49:32 +02:00 |
|
|
Andreas Steffen
|
0c8d08068e
|
pluto's crl handling now uses the x509 plugin
|
2009-09-30 09:29:15 +02:00 |
|
|
Andreas Steffen
|
5406c65702
|
scepclient uses pkcs10 from libstrongswan
|
2009-09-28 05:52:20 +02:00 |
|
|
Andreas Steffen
|
c72080cea8
|
abbreviated struct connection by connection_t
|
2009-09-27 23:49:37 +02:00 |
|
|
Andreas Steffen
|
0eff9f6539
|
pluto and scepclient now use the x509 plugin for certificates
|
2009-09-27 23:09:30 +02:00 |
|
|
Andreas Steffen
|
727b0f11e2
|
whitelist Curl_client_write
|
2009-09-27 23:07:21 +02:00 |
|
|
Andreas Steffen
|
02bf410aa9
|
certificate subject DNs are in double quotes
|
2009-09-23 22:03:52 +02:00 |
|
|
Andreas Steffen
|
b362cc2382
|
streamlining of credential loading debug output
|
2009-09-23 21:55:48 +02:00 |
|
|
Andreas Steffen
|
1806024105
|
added fix of PKCS#7 wrapped certificates to NEWS
|
2009-09-23 21:50:56 +02:00 |
|
|
Andreas Steffen
|
45cc7ba403
|
added and fixed debug output of version information
|
2009-09-23 16:21:18 +02:00 |
|
|
Andreas Steffen
|
c0be0977e7
|
fixed PKCS#7 wrapped certificate parsing
|
2009-09-23 15:52:30 +02:00 |
|
|
Andreas Steffen
|
677322b1bf
|
enforce coding rules
|
2009-09-22 21:50:28 +02:00 |
|
|
Andreas Steffen
|
b62ce860c1
|
enforce coding rules
|
2009-09-22 20:55:10 +02:00 |
|
|
Andreas Steffen
|
b88bbe8aa1
|
set XFRM_STATE_AF_UNSPEC flag
|
2009-09-22 20:55:10 +02:00 |
|
|
Andreas Steffen
|
a28334720c
|
adding additional flags to loaded X.509 certificates
|
2009-09-22 12:55:25 +02:00 |
|
|
Andreas Steffen
|
b80fa9ca38
|
readying NEWS for the strongswan-4.3.5dr2 release
|
2009-09-22 12:44:58 +02:00 |
|
|
Andreas Steffen
|
4b15ee8cd9
|
shortened file loading debug output
|
2009-09-22 12:33:13 +02:00 |
|
|
Andreas Steffen
|
1271983ab9
|
computed hash-and-url for new certificates
|
2009-09-22 12:05:37 +02:00 |
|
|
Andreas Steffen
|
8153be823b
|
plugin has been renamed to resolve
|
2009-09-20 22:03:23 +02:00 |
|
|
Andreas Steffen
|
399ce164ad
|
delete resolv_conf_* files
|
2009-09-20 21:59:36 +02:00 |
|
|
Andreas Steffen
|
af784261f5
|
all arguments must be read
|
2009-09-20 21:56:22 +02:00 |
|
|
Andreas Steffen
|
4819ec6a71
|
resolv_conf plugin renamed to resolve
|
2009-09-20 19:06:58 +02:00 |
|
|
Andreas Steffen
|
03f096df7e
|
adapt evaltest.dat to changed debug output
|
2009-09-20 17:23:24 +02:00 |
|
|
Andreas Steffen
|
d7f2ffcf11
|
renewed certs in dynamic-initiator/dynamic-responder scenarios
|
2009-09-19 08:18:42 +02:00 |
|
|
Andreas Steffen
|
6aa8d2c8bb
|
use new certificates
|
2009-09-19 00:26:55 +02:00 |
|
|
Andreas Steffen
|
05a6a77d85
|
eliminated double library_deinit()
|
2009-09-19 00:00:56 +02:00 |
|
|
Andreas Steffen
|
309b8b3956
|
keyids of renewed keys
|
2009-09-18 21:44:57 +02:00 |
|
|
Andreas Steffen
|
afcd0b9787
|
updated to renewed certs in SQL database
|
2009-09-18 21:22:37 +02:00 |
|
|
Andreas Steffen
|
bdfe17c79b
|
renewal of end entity certificates
|
2009-09-18 21:17:03 +02:00 |
|
|
Andreas Steffen
|
ddbb34093f
|
fixed --enable-eap-md5 and --enable-eap-gtc options
|
2009-09-18 18:23:26 +02:00 |
|
|
Andreas Steffen
|
d78a0262d1
|
backwards compatibility with SQL format
|
2009-09-18 15:48:24 +02:00 |
|
|
Andreas Steffen
|
d245f5cf33
|
some reformulations
|
2009-09-17 22:21:14 +02:00 |
|
|
Andreas Steffen
|
8101695b32
|
fixed typo
|
2009-09-15 16:48:13 +02:00 |
|
|
Andreas Steffen
|
f561d6f2e9
|
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
|
2009-08-31 23:21:50 +02:00 |
|
|
Andreas Steffen
|
dc4aadc3f2
|
use crl_reason_t definition from <credentials/certificates/crl.h>
|
2009-08-31 23:05:45 +02:00 |
|
|
Andreas Steffen
|
a63f62c03b
|
use crl_reason_t definition from <credentials/certificates/crl.h>
|
2009-08-31 22:58:34 +02:00 |
|
|
Andreas Steffen
|
52673c4348
|
generation of keyid requires pkcs1 plugin
|
2009-08-30 22:55:40 +02:00 |
|
|
Andreas Steffen
|
c9f74892cc
|
clear RSA private key chunks after use
|
2009-08-30 19:12:29 +02:00 |
|
|
Andreas Steffen
|
1982096aa0
|
ASN.1 DER encoding of private key is not needed anymore
|
2009-08-30 19:05:43 +02:00 |
|
|
Andreas Steffen
|
26fa5a37d9
|
new UML scenario certs have SHA256 digest
|
2009-08-30 17:58:34 +02:00 |
|
|
Andreas Steffen
|
735628f3e3
|
removed position debug output
|
2009-08-30 17:37:27 +02:00 |
|
|
Andreas Steffen
|
2aa67d2636
|
.., but a comment might be helpful
|
2009-08-28 09:28:39 +02:00 |
|
|
Andreas Steffen
|
6be3f0f1d0
|
removed TODO reminder
|
2009-08-28 09:26:46 +02:00 |
|
|
Andreas Steffen
|
be04eef270
|
allow choice of digest algorithm in certificate generation
|
2009-08-28 09:08:03 +02:00 |
|
|
Andreas Steffen
|
e201f53e93
|
build_curve_signature() processes hash not data
|
2009-08-27 20:41:29 +02:00 |
|
|
Andreas Steffen
|
1dbaec2177
|
NID_hash and NID_ec_curve were interchanged
|
2009-08-27 20:28:41 +02:00 |
|
|
Andreas Steffen
|
ac6a0d5038
|
verify_signature() now processes hash not data
|
2009-08-27 20:18:22 +02:00 |
|
|
Andreas Steffen
|
c812802482
|
NID_hash and NID_ec_curver were interchanged
|
2009-08-27 20:11:49 +02:00 |
|
|
Andreas Steffen
|
78aa4ebd62
|
OID_EC_PUBLICKEY has a parameters field, defining the elliptic curve
|
2009-08-27 16:34:16 +02:00 |
|